Skip to content

Commit 3d2eae5

Browse files
committed
chore(security): override protobufjs + fast-xml-parser for critical CVEs
1 parent ea1d339 commit 3d2eae5

2 files changed

Lines changed: 50 additions & 31 deletions

File tree

package.json

Lines changed: 4 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -104,7 +104,10 @@
104104
"rollup@>=4 <4.59.0": "^4.59.0",
105105
"flatted@<3.4.2": "^3.4.2",
106106
"picomatch@>=4.0.0 <4.0.4": "^4.0.4",
107-
"minimatch@>=3 <3.1.3": "^3.1.3"
107+
"minimatch@>=3 <3.1.3": "^3.1.3",
108+
"protobufjs@<7.5.5": "^7.5.5",
109+
"fast-xml-parser@>=4 <4.5.5": "^4.5.5",
110+
"fast-xml-parser@>=5 <5.7.0": "^5.7.0"
108111
},
109112
"onlyBuiltDependencies": [
110113
"@depot/cli",

pnpm-lock.yaml

Lines changed: 46 additions & 30 deletions
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

0 commit comments

Comments
 (0)